@qduc/term2 0.11.1 → 0.13.0

package/dist/services/session/pending-interaction-state.d.ts

@@ -0,0 +1,60 @@
+import type { PendingApproval } from '../../contracts/conversation.js';
+export type AskUserAnswer = string | string[];
+/**
+ * The session-owned description of an interaction which blocks foreground
+ * progress. It deliberately contains no Ink state: focus and composer entry
+ * mode remain presentation concerns.
+ */
+export type PendingInteractionSnapshot = {
+    readonly interactionId: number;
+    readonly approval: PendingApproval;
+    readonly askUserAnswers: readonly AskUserAnswer[];
+    readonly currentAskUserQuestionIndex: number;
+};
+export type ResolvePendingInteractionRequest = {
+    readonly expectedInteractionId: number;
+    readonly answer: string;
+    readonly rejectionReason?: string;
+    readonly approvalAnswer?: string;
+};
+export type PendingInteractionResolution = {
+    readonly kind: 'none';
+} | {
+    readonly kind: 'stale_interaction';
+    readonly expectedInteractionId: number;
+    readonly currentInteractionId: number;
+} | {
+    readonly kind: 'awaiting_next_question';
+    readonly interactionId: number;
+    readonly snapshot: PendingInteractionSnapshot;
+} | {
+    readonly kind: 'resolved';
+    readonly interactionId: number;
+    readonly approval: PendingApproval;
+    readonly answer: string;
+    readonly rejectionReason?: string;
+    readonly approvalAnswer?: string;
+};
+/**
+ * Authoritative interaction protocol for one session.
+ *
+ * The state owns the pending approval, multi-question ask_user answers and
+ * navigation index. Consumers subscribe to immutable snapshots and send only
+ * semantic commands, so they cannot accidentally complete a different
+ * interaction after a continuation has produced a new approval.
+ */
+export declare class PendingInteractionState {
+    #private;
+    getSnapshot(): PendingInteractionSnapshot | null;
+    setObserver(observer: ((snapshot: PendingInteractionSnapshot | null) => void) | null): void;
+    present(approval: PendingApproval): PendingInteractionSnapshot;
+    clear(): void;
+    goToPreviousQuestion(): void;
+    /**
+     * Kept as a characterization of the existing prompt behavior: forward
+     * navigation changes the displayed question before an answer is recorded.
+     */
+    goToNextQuestion(): void;
+    resolve(request: ResolvePendingInteractionRequest): PendingInteractionResolution;
+}
+//# sourceMappingURL=pending-interaction-state.d.ts.map

package/dist/services/session/pending-interaction-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-interaction-state.d.ts","sourceRoot":"","sources":["../../../source/services/session/pending-interaction-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAGvE,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAE9C;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAC;IAClD,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;CAC9C,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,4BAA4B,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IACE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CAC/C,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AA6BN;;;;;;;GAOG;AACH,qBAAa,uBAAuB;;IAKlC,WAAW,IAAI,0BAA0B,GAAG,IAAI,CAE/C;IAED,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAG1F;IAED,OAAO,CAAC,QAAQ,EAAE,eAAe,GAAG,0BAA0B,CAQ7D;IAED,KAAK,IAAI,IAAI,CAIZ;IAED,oBAAoB,IAAI,IAAI,CAM3B;IAED;;;OAGG;IACH,gBAAgB,IAAI,IAAI,CAKvB;IAED,OAAO,CAAC,OAAO,EAAE,gCAAgC,GAAG,4BAA4B,CAsD/E;CAQF"}

package/dist/services/session/pending-interaction-state.js

@@ -0,0 +1,132 @@
+import { isAskUserTerminalAnswer } from '../../tools/agent/ask-user-constants.js';
+function getAskUserQuestions(approval) {
+    try {
+        const parsed = JSON.parse(approval.argumentsText);
+        return Array.isArray(parsed.questions) ? parsed.questions : [];
+    }
+    catch {
+        return [];
+    }
+}
+function cloneSnapshot(interaction) {
+    return {
+        interactionId: interaction.interactionId,
+        approval: interaction.approval,
+        askUserAnswers: interaction.askUserAnswers.map((answer) => (Array.isArray(answer) ? [...answer] : answer)),
+        currentAskUserQuestionIndex: interaction.currentAskUserQuestionIndex,
+    };
+}
+/**
+ * Authoritative interaction protocol for one session.
+ *
+ * The state owns the pending approval, multi-question ask_user answers and
+ * navigation index. Consumers subscribe to immutable snapshots and send only
+ * semantic commands, so they cannot accidentally complete a different
+ * interaction after a continuation has produced a new approval.
+ */
+export class PendingInteractionState {
+    #current = null;
+    #nextInteractionId = 1;
+    #observer = null;
+    getSnapshot() {
+        return this.#current ? cloneSnapshot(this.#current) : null;
+    }
+    setObserver(observer) {
+        this.#observer = observer;
+        observer?.(this.getSnapshot());
+    }
+    present(approval) {
+        this.#current = {
+            interactionId: this.#nextInteractionId++,
+            approval,
+            askUserAnswers: [],
+            currentAskUserQuestionIndex: 0,
+        };
+        return this.#publish();
+    }
+    clear() {
+        if (!this.#current)
+            return;
+        this.#current = null;
+        this.#observer?.(null);
+    }
+    goToPreviousQuestion() {
+        const current = this.#current;
+        if (!current || current.currentAskUserQuestionIndex <= 0)
+            return;
+        current.currentAskUserQuestionIndex -= 1;
+        current.askUserAnswers.pop();
+        this.#publish();
+    }
+    /**
+     * Kept as a characterization of the existing prompt behavior: forward
+     * navigation changes the displayed question before an answer is recorded.
+     */
+    goToNextQuestion() {
+        const current = this.#current;
+        if (!current)
+            return;
+        current.currentAskUserQuestionIndex += 1;
+        this.#publish();
+    }
+    resolve(request) {
+        const current = this.#current;
+        if (!current)
+            return { kind: 'none' };
+        if (current.interactionId !== request.expectedInteractionId) {
+            return {
+                kind: 'stale_interaction',
+                expectedInteractionId: request.expectedInteractionId,
+                currentInteractionId: current.interactionId,
+            };
+        }
+        let approvalAnswer = request.approvalAnswer;
+        if (current.approval.toolName === 'ask_user' &&
+            request.answer === 'y' &&
+            !isAskUserTerminalAnswer(approvalAnswer)) {
+            const questions = getAskUserQuestions(current.approval);
+            let parsedAnswer = approvalAnswer ?? '';
+            const currentQuestion = questions[current.askUserAnswers.length];
+            if (currentQuestion?.is_multi_select) {
+                try {
+                    const parsed = JSON.parse(approvalAnswer ?? '');
+                    if (Array.isArray(parsed)) {
+                        parsedAnswer = parsed.filter((item) => typeof item === 'string');
+                    }
+                }
+                catch {
+                    // Preserve the previous plain-text fallback for malformed input.
+                }
+            }
+            const nextAnswers = [...current.askUserAnswers, parsedAnswer];
+            current.askUserAnswers = nextAnswers;
+            current.currentAskUserQuestionIndex = nextAnswers.length;
+            if (nextAnswers.length < questions.length) {
+                return {
+                    kind: 'awaiting_next_question',
+                    interactionId: current.interactionId,
+                    snapshot: this.#publish(),
+                };
+            }
+            approvalAnswer = JSON.stringify(nextAnswers);
+        }
+        const resolution = {
+            kind: 'resolved',
+            interactionId: current.interactionId,
+            approval: current.approval,
+            answer: request.answer,
+            ...(request.rejectionReason ? { rejectionReason: request.rejectionReason } : {}),
+            ...(approvalAnswer !== undefined ? { approvalAnswer } : {}),
+        };
+        this.clear();
+        return resolution;
+    }
+    #publish() {
+        const snapshot = this.getSnapshot();
+        if (!snapshot)
+            throw new Error('Cannot publish an absent pending interaction');
+        this.#observer?.(snapshot);
+        return snapshot;
+    }
+}
+//# sourceMappingURL=pending-interaction-state.js.map

package/dist/services/session/pending-interaction-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-interaction-state.js","sourceRoot":"","sources":["../../../source/services/session/pending-interaction-state.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAqDlF,SAAS,mBAAmB,CAAC,QAAyB;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAA4B,CAAC;QAC7E,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,SAA+B,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,WAAsC;IAC3D,OAAO;QACL,aAAa,EAAE,WAAW,CAAC,aAAa;QACxC,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,cAAc,EAAE,WAAW,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1G,2BAA2B,EAAE,WAAW,CAAC,2BAA2B;KACrE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,uBAAuB;IAClC,QAAQ,GAAqC,IAAI,CAAC;IAClD,kBAAkB,GAAG,CAAC,CAAC;IACvB,SAAS,GAAmE,IAAI,CAAC;IAEjF,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IAED,WAAW,CAAC,QAAwE;QAClF,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,QAAQ,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,CAAC,QAAyB;QAC/B,IAAI,CAAC,QAAQ,GAAG;YACd,aAAa,EAAE,IAAI,CAAC,kBAAkB,EAAE;YACxC,QAAQ;YACR,cAAc,EAAE,EAAE;YAClB,2BAA2B,EAAE,CAAC;SAC/B,CAAC;QACF,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC3B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,oBAAoB;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,2BAA2B,IAAI,CAAC;YAAE,OAAO;QACjE,OAAO,CAAC,2BAA2B,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED;;;OAGG;IACH,gBAAgB;QACd,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,OAAO,CAAC,2BAA2B,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,OAAyC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,aAAa,KAAK,OAAO,CAAC,qBAAqB,EAAE,CAAC;YAC5D,OAAO;gBACL,IAAI,EAAE,mBAAmB;gBACzB,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;gBACpD,oBAAoB,EAAE,OAAO,CAAC,aAAa;aAC5C,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC5C,IACE,OAAO,CAAC,QAAQ,CAAC,QAAQ,KAAK,UAAU;YACxC,OAAO,CAAC,MAAM,KAAK,GAAG;YACtB,CAAC,uBAAuB,CAAC,cAAc,CAAC,EACxC,CAAC;YACD,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACxD,IAAI,YAAY,GAAkB,cAAc,IAAI,EAAE,CAAC;YACvD,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACjE,IAAI,eAAe,EAAE,eAAe,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;oBAChD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC1B,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;oBACnF,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,iEAAiE;gBACnE,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;YAC9D,OAAO,CAAC,cAAc,GAAG,WAAW,CAAC;YACrC,OAAO,CAAC,2BAA2B,GAAG,WAAW,CAAC,MAAM,CAAC;YACzD,IAAI,WAAW,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;gBAC1C,OAAO;oBACL,IAAI,EAAE,wBAAwB;oBAC9B,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;iBAC1B,CAAC;YACJ,CAAC;YACD,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,UAAU,GAAiC;YAC/C,IAAI,EAAE,UAAU;YAChB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,QAAQ;QACN,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC/E,IAAI,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC3B,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/services/session/post-execute-pause-capability.d.ts

@@ -0,0 +1,17 @@
+import type { z, ZodTypeAny } from 'zod';
+import type { AnyToolDefinition, PostExecutePauseCapability as PostExecutePauseCapabilityPort, PostExecutePolicy, SchemaToolDefinition } from '../../tools/types.js';
+import { PostExecutePendingRegistry } from './post-execute-pending-registry.js';
+/**
+ * Session-owned construction capability. It is deliberately supplied only to
+ * the root AgentClient: nested/subagent tool factories retain their existing
+ * behavior until a later slice gives them an explicit ownership model.
+ */
+export declare class PostExecutePauseCapability implements PostExecutePauseCapabilityPort {
+    #private;
+    readonly pending: PostExecutePendingRegistry;
+    constructor(pending: PostExecutePendingRegistry);
+    setActiveRunId(runId: string | null): void;
+    forTool<TSchema extends ZodTypeAny>(definition: SchemaToolDefinition<TSchema>): PostExecutePolicy<z.infer<TSchema>> | undefined;
+    forTool(definition: AnyToolDefinition): PostExecutePolicy<unknown> | undefined;
+}
+//# sourceMappingURL=post-execute-pause-capability.d.ts.map

package/dist/services/session/post-execute-pause-capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-execute-pause-capability.d.ts","sourceRoot":"","sources":["../../../source/services/session/post-execute-pause-capability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,KAAK,CAAC;AACzC,OAAO,KAAK,EACV,iBAAiB,EACjB,0BAA0B,IAAI,8BAA8B,EAC5D,iBAAiB,EACjB,oBAAoB,EACrB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAEhF;;;;GAIG;AACH,qBAAa,0BAA2B,YAAW,8BAA8B;;IAGnE,QAAQ,CAAC,OAAO,EAAE,0BAA0B;IAAxD,YAAqB,OAAO,EAAE,0BAA0B,EAAI;IAE5D,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAEzC;IAED,OAAO,CAAC,OAAO,SAAS,UAAU,EAChC,UAAU,EAAE,oBAAoB,CAAC,OAAO,CAAC,GACxC,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IACnD,OAAO,CAAC,UAAU,EAAE,iBAAiB,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;CAUhF"}

package/dist/services/session/post-execute-pause-capability.js

@@ -0,0 +1,27 @@
+import { createPostExecutePausePolicy } from './post-execute-pause-policy.js';
+/**
+ * Session-owned construction capability. It is deliberately supplied only to
+ * the root AgentClient: nested/subagent tool factories retain their existing
+ * behavior until a later slice gives them an explicit ownership model.
+ */
+export class PostExecutePauseCapability {
+    pending;
+    #activeRunId = null;
+    constructor(pending) {
+        this.pending = pending;
+    }
+    setActiveRunId(runId) {
+        this.#activeRunId = runId;
+    }
+    forTool(definition) {
+        if (!definition.postExecutePause)
+            return undefined;
+        return createPostExecutePausePolicy({
+            pending: this.pending,
+            runId: () => this.#activeRunId,
+            describe: definition.postExecutePause.describe,
+            resolve: definition.postExecutePause.resolve,
+        });
+    }
+}
+//# sourceMappingURL=post-execute-pause-capability.js.map

package/dist/services/session/post-execute-pause-capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-execute-pause-capability.js","sourceRoot":"","sources":["../../../source/services/session/post-execute-pause-capability.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAG9E;;;;GAIG;AACH,MAAM,OAAO,0BAA0B;IAGhB,OAAO;IAF5B,YAAY,GAAkB,IAAI,CAAC;IAEnC,YAAqB,OAAmC;uBAAnC,OAAO;IAA+B,CAAC;IAE5D,cAAc,CAAC,KAAoB;QACjC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAC5B,CAAC;IAMD,OAAO,CAAC,UAA6B;QACnC,IAAI,CAAC,UAAU,CAAC,gBAAgB;YAAE,OAAO,SAAS,CAAC;QACnD,OAAO,4BAA4B,CAAC;YAClC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY;YAC9B,QAAQ,EAAE,UAAU,CAAC,gBAAgB,CAAC,QAAQ;YAC9C,OAAO,EAAE,UAAU,CAAC,gBAAgB,CAAC,OAAO;SAC7C,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/services/session/post-execute-pause-policy.d.ts

@@ -0,0 +1,20 @@
+import type { PostExecutePolicy } from '../../tools/types.js';
+import type { PostExecutePendingRegistry } from './post-execute-pending-registry.js';
+/**
+ * Turns the application-owned tool seam into a fail-closed gate. It intentionally
+ * does not know about SDK streams: holding this promise leaves the already-live
+ * SDK execution waiting at the tool boundary; an approval re-executes exactly
+ * once through the supplied non-recursive callback.
+ */
+export declare function createPostExecutePausePolicy<Params>(options: {
+    pending: PostExecutePendingRegistry;
+    /** A live run is created after tools are assembled, so production wiring may resolve lazily. */
+    runId: string | null | (() => string | null);
+    describe: (params: Params, result: unknown, details: unknown) => {
+        toolName: string;
+        argumentsText: string;
+        deniedRead?: import('../../contracts/conversation.js').DeniedReadMetadata;
+    } | null;
+    resolve?: (context: Parameters<PostExecutePolicy<Params>>[0], decision: import('../../contracts/conversation.js').PostExecuteDecision) => Promise<unknown> | unknown;
+}): PostExecutePolicy<Params>;
+//# sourceMappingURL=post-execute-pause-policy.d.ts.map

package/dist/services/session/post-execute-pause-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-execute-pause-policy.d.ts","sourceRoot":"","sources":["../../../source/services/session/post-execute-pause-policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAErF;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,OAAO,EAAE;IAC5D,OAAO,EAAE,0BAA0B,CAAC;IACpC,gGAAgG;IAChG,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,QAAQ,EAAE,CACR,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,OAAO,KACb;QACH,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,OAAO,iCAAiC,EAAE,kBAAkB,CAAC;KAC3E,GAAG,IAAI,CAAC;IACT,OAAO,CAAC,EAAE,CACR,OAAO,EAAE,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EACjD,QAAQ,EAAE,OAAO,iCAAiC,EAAE,mBAAmB,KACpE,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACjC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAuB5B"}

package/dist/services/session/post-execute-pause-policy.js

@@ -0,0 +1,34 @@
+import { asRecord, getCallIdFromObject } from '../interruption-info.js';
+/**
+ * Turns the application-owned tool seam into a fail-closed gate. It intentionally
+ * does not know about SDK streams: holding this promise leaves the already-live
+ * SDK execution waiting at the tool boundary; an approval re-executes exactly
+ * once through the supplied non-recursive callback.
+ */
+export function createPostExecutePausePolicy(options) {
+    return async (context) => {
+        const { params, result, details, executeAgain } = context;
+        const runId = typeof options.runId === 'function' ? options.runId() : options.runId;
+        const descriptor = options.describe(params, result, details);
+        if (!descriptor)
+            return result;
+        // A policy accidentally invoked outside an owned foreground run must not
+        // manufacture an unresumable gate. Let a custom resolver discard any
+        // call-scoped state using the same fail-closed rejection path as disposal.
+        if (!runId)
+            return options.resolve ? options.resolve(context, 'reject') : result;
+        const toolCallId = getCallIdFromObject(asRecord(details)?.toolCall);
+        if (!toolCallId) {
+            throw new Error('Post-execute approval requires an SDK tool call ID');
+        }
+        const decision = await options.pending.register({
+            runId,
+            toolCallId,
+            toolName: descriptor.toolName,
+            argumentsText: descriptor.argumentsText,
+            deniedRead: descriptor.deniedRead,
+        });
+        return options.resolve ? options.resolve(context, decision) : decision === 'approve' ? executeAgain() : result;
+    };
+}
+//# sourceMappingURL=post-execute-pause-policy.js.map

package/dist/services/session/post-execute-pause-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-execute-pause-policy.js","sourceRoot":"","sources":["../../../source/services/session/post-execute-pause-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAIxE;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAS,OAiBpD;IACC,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;QAC1D,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACpF,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU;YAAE,OAAO,MAAM,CAAC;QAC/B,yEAAyE;QACzE,qEAAqE;QACrE,2EAA2E;QAC3E,IAAI,CAAC,KAAK;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACjF,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC9C,KAAK;YACL,UAAU;YACV,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,UAAU,EAAE,UAAU,CAAC,UAAU;SAClC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACjH,CAAC,CAAC;AACJ,CAAC"}

package/dist/services/session/post-execute-pending-registry.d.ts

@@ -0,0 +1,63 @@
+import type { PostExecuteDecision } from '../../contracts/conversation.js';
+export type { PostExecuteDecision } from '../../contracts/conversation.js';
+export type PostExecutePendingEntry = {
+    /** Stable across UI re-renders; includes the session epoch and live run identity. */
+    id: string;
+    runId: string;
+    toolCallId: string;
+    toolName: string;
+    argumentsText: string;
+    deniedRead?: import('../../contracts/conversation.js').DeniedReadMetadata;
+};
+export type PostExecutePendingSnapshot = {
+    sessionId: string;
+    epoch: string | number;
+    /** Monotonic snapshot revision. Notifications are only a hint to re-read this. */
+    revision: number;
+    entries: readonly PostExecutePendingEntry[];
+    closed: boolean;
+};
+export type PostExecuteDecisionRequest = {
+    revision: number;
+    ids: readonly string[];
+    decision: PostExecuteDecision;
+};
+export type PostExecuteDecisionResult = {
+    kind: 'settled';
+    settledIds: readonly string[];
+} | {
+    kind: 'invalid';
+    reason: 'closed' | 'revision_mismatch' | 'empty_selection' | 'duplicate_id' | 'unknown_entry';
+};
+/**
+ * Session/epoch-owned post-execute gates.
+ *
+ * This deliberately has no notion of an SDK dispatch barrier: each snapshot is
+ * authoritative only for registrations visible at its revision. Callers must
+ * re-read after every wakeup. Decisions validate the complete selected set
+ * before settling any gate, so a stale or partial request cannot half-apply.
+ */
+export declare class PostExecutePendingRegistry {
+    #private;
+    constructor(options: {
+        sessionId: string;
+        epoch: string | number;
+    });
+    get version(): number;
+    snapshot(): PostExecutePendingSnapshot;
+    entriesForRun(runId: string): readonly PostExecutePendingEntry[];
+    /** Resolves after a later state change, or immediately if one was already observed. */
+    waitForChange(observedVersion: number): Promise<number>;
+    /** Cancellable subscription for consumers that race registry and local events. */
+    watchForChange(observedVersion: number): {
+        promise: Promise<number>;
+        unsubscribe: () => void;
+    };
+    register(input: Omit<PostExecutePendingEntry, 'id'>): Promise<PostExecuteDecision>;
+    decide(request: PostExecuteDecisionRequest): PostExecuteDecisionResult;
+    /** Fail closed: unblock every held tool before the session can be replaced. */
+    close(): void;
+    /** Fail closed for one terminal live run without closing its replacement session. */
+    closeRun(runId: string): void;
+}
+//# sourceMappingURL=post-execute-pending-registry.d.ts.map

package/dist/services/session/post-execute-pending-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-execute-pending-registry.d.ts","sourceRoot":"","sources":["../../../source/services/session/post-execute-pending-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,YAAY,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,MAAM,MAAM,uBAAuB,GAAG;IACpC,qFAAqF;IACrF,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,iCAAiC,EAAE,kBAAkB,CAAC;CAC3E,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,kFAAkF;IAClF,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC5C,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,SAAS,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,mBAAmB,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,yBAAyB,GACjC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,QAAQ,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,cAAc,GAAG,eAAe,CAAA;CAAE,CAAC;AAOvH;;;;;;;GAOG;AACH,qBAAa,0BAA0B;;IAQrC,YAAY,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,EAGjE;IAED,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,QAAQ,IAAI,0BAA0B,CAQrC;IAED,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,uBAAuB,EAAE,CAE/D;IAED,uFAAuF;IACvF,aAAa,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGtD;IAED,kFAAkF;IAClF,cAAc,CAAC,eAAe,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,WAAW,EAAE,MAAM,IAAI,CAAA;KAAE,CAkB7F;IAED,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CASjF;IAED,MAAM,CAAC,OAAO,EAAE,0BAA0B,GAAG,yBAAyB,CAarE;IAED,+EAA+E;IAC/E,KAAK,IAAI,IAAI,CAOZ;IAED,qFAAqF;IACrF,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAM5B;CAQF"}

package/dist/services/session/post-execute-pending-registry.js

@@ -0,0 +1,123 @@
+/**
+ * Session/epoch-owned post-execute gates.
+ *
+ * This deliberately has no notion of an SDK dispatch barrier: each snapshot is
+ * authoritative only for registrations visible at its revision. Callers must
+ * re-read after every wakeup. Decisions validate the complete selected set
+ * before settling any gate, so a stale or partial request cannot half-apply.
+ */
+export class PostExecutePendingRegistry {
+    #sessionId;
+    #epoch;
+    #pending = new Map();
+    #waiters = new Set();
+    #revision = 0;
+    #closed = false;
+    constructor(options) {
+        this.#sessionId = options.sessionId;
+        this.#epoch = options.epoch;
+    }
+    get version() {
+        return this.#revision;
+    }
+    snapshot() {
+        return {
+            sessionId: this.#sessionId,
+            epoch: this.#epoch,
+            revision: this.#revision,
+            entries: [...this.#pending.values()].map(({ entry }) => ({ ...entry })),
+            closed: this.#closed,
+        };
+    }
+    entriesForRun(runId) {
+        return this.snapshot().entries.filter((entry) => entry.runId === runId);
+    }
+    /** Resolves after a later state change, or immediately if one was already observed. */
+    waitForChange(observedVersion) {
+        if (this.#revision !== observedVersion)
+            return Promise.resolve(this.#revision);
+        return new Promise((resolve) => this.#waiters.add(resolve));
+    }
+    /** Cancellable subscription for consumers that race registry and local events. */
+    watchForChange(observedVersion) {
+        if (this.#revision !== observedVersion) {
+            return { promise: Promise.resolve(this.#revision), unsubscribe: () => { } };
+        }
+        let active = true;
+        let resolveWaiter;
+        const promise = new Promise((resolve) => {
+            resolveWaiter = resolve;
+            this.#waiters.add(resolveWaiter);
+        });
+        return {
+            promise,
+            unsubscribe: () => {
+                if (!active)
+                    return;
+                active = false;
+                this.#waiters.delete(resolveWaiter);
+            },
+        };
+    }
+    register(input) {
+        if (this.#closed)
+            throw new Error('Post-execute pending registry is closed');
+        const id = `${this.#sessionId}:${this.#epoch}:${input.runId}:${input.toolCallId}`;
+        if (this.#pending.has(id))
+            throw new Error(`Duplicate active post-execute gate: ${id}`);
+        return new Promise((settle) => {
+            this.#pending.set(id, { entry: { ...input, id }, settle });
+            this.#changed();
+        });
+    }
+    decide(request) {
+        if (this.#closed)
+            return { kind: 'invalid', reason: 'closed' };
+        if (request.revision !== this.#revision)
+            return { kind: 'invalid', reason: 'revision_mismatch' };
+        if (request.ids.length === 0)
+            return { kind: 'invalid', reason: 'empty_selection' };
+        const ids = [...request.ids];
+        if (new Set(ids).size !== ids.length)
+            return { kind: 'invalid', reason: 'duplicate_id' };
+        if (ids.some((id) => !this.#pending.has(id)))
+            return { kind: 'invalid', reason: 'unknown_entry' };
+        const selected = ids.map((id) => this.#pending.get(id));
+        for (const id of ids)
+            this.#pending.delete(id);
+        this.#changed();
+        for (const pending of selected)
+            pending.settle(request.decision);
+        return { kind: 'settled', settledIds: ids };
+    }
+    /** Fail closed: unblock every held tool before the session can be replaced. */
+    close() {
+        if (this.#closed)
+            return;
+        this.#closed = true;
+        const pending = [...this.#pending.values()];
+        this.#pending.clear();
+        this.#changed();
+        for (const gate of pending)
+            gate.settle('reject');
+    }
+    /** Fail closed for one terminal live run without closing its replacement session. */
+    closeRun(runId) {
+        const pending = [...this.#pending.entries()].filter(([, gate]) => gate.entry.runId === runId);
+        if (pending.length === 0)
+            return;
+        for (const [id] of pending)
+            this.#pending.delete(id);
+        this.#changed();
+        for (const [, gate] of pending)
+            gate.settle('reject');
+    }
+    #changed() {
+        this.#revision += 1;
+        const waiters = [...this.#waiters];
+        this.#waiters.clear();
+        for (const wake of waiters)
+            wake(this.#revision);
+    }
+}
+//# sourceMappingURL=post-execute-pending-registry.js.map

package/dist/services/session/post-execute-pending-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-execute-pending-registry.js","sourceRoot":"","sources":["../../../source/services/session/post-execute-pending-registry.ts"],"names":[],"mappings":"AAsCA;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA0B;IAC5B,UAAU,CAAS;IACnB,MAAM,CAAkB;IACxB,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IACzD,SAAS,GAAG,CAAC,CAAC;IACd,OAAO,GAAG,KAAK,CAAC;IAEhB,YAAY,OAAsD;QAChE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAC9B,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,QAAQ;QACN,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YACvE,MAAM,EAAE,IAAI,CAAC,OAAO;SACrB,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,KAAa;QACzB,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAC1E,CAAC;IAED,uFAAuF;IACvF,aAAa,CAAC,eAAuB;QACnC,IAAI,IAAI,CAAC,SAAS,KAAK,eAAe;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,kFAAkF;IAClF,cAAc,CAAC,eAAuB;QACpC,IAAI,IAAI,CAAC,SAAS,KAAK,eAAe,EAAE,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;QAC7E,CAAC;QACD,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,aAAyC,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;YAC9C,aAAa,GAAG,OAAO,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,OAAO;YACL,OAAO;YACP,WAAW,EAAE,GAAG,EAAE;gBAChB,IAAI,CAAC,MAAM;oBAAE,OAAO;gBACpB,MAAM,GAAG,KAAK,CAAC;gBACf,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACtC,CAAC;SACF,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,KAA0C;QACjD,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7E,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QAClF,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,EAAE,EAAE,CAAC,CAAC;QAExF,OAAO,IAAI,OAAO,CAAsB,CAAC,MAAM,EAAE,EAAE;YACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,OAAmC;QACxC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC/D,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACjG,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QACpF,MAAM,GAAG,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACzF,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAElG,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;QACzD,KAAK,MAAM,EAAE,IAAI,GAAG;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,KAAK,MAAM,OAAO,IAAI,QAAQ;YAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC9C,CAAC;IAED,+EAA+E;IAC/E,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,qFAAqF;IACrF,QAAQ,CAAC,KAAa;QACpB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QAC9F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACjC,KAAK,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,OAAO;YAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACpB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;CACF"}

package/dist/services/session/session-access-state.d.ts

@@ -0,0 +1,24 @@
+import type { ISettingsService } from '../service-interfaces.js';
+export type DockerHostControlGrant = 'once' | 'session' | 'project';
+/** Session-bound read and Docker state; project Docker grants stay in settings. */
+export declare class SessionAccessState {
+    #private;
+    private readonly settings;
+    constructor(settings: ISettingsService);
+    allowReadFolder(folder: string): void;
+    allowsRead(targetPath: string, baseDir?: string): boolean;
+    allowEditFile(file: string, baseDir?: string): void;
+    allowEditFolder(folder: string, baseDir?: string): void;
+    allowsEdit(targetPath: string, baseDir?: string): boolean;
+    requiresDockerApproval(command: string): boolean;
+    grantDocker(command: string, cwd: string, scope: DockerHostControlGrant): void;
+    hasDockerGrant(command: string, cwd: string): boolean;
+    hasDockerSessionGrant(cwd: string): boolean;
+    hasDockerProject(cwd: string): boolean;
+    recordDockerDenial(command: string): void;
+    consumeDockerDenial(command: string): boolean;
+    /** Clears state that must not survive a reset or imported conversation. */
+    clearTransient(): void;
+    dispose(): void;
+}
+//# sourceMappingURL=session-access-state.d.ts.map

package/dist/services/session/session-access-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-access-state.d.ts","sourceRoot":"","sources":["../../../source/services/session/session-access-state.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAEpE,mFAAmF;AACnF,qBAAa,kBAAkB;;IAQjB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAArC,YAA6B,QAAQ,EAAE,gBAAgB,EAAI;IAE3D,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEpC;IAED,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,MAAiC,GAAG,OAAO,CAMlF;IAED,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,MAAiC,GAAG,IAAI,CAE5E;IAED,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,MAAiC,GAAG,IAAI,CAEhF;IAED,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,MAAiC,GAAG,OAAO,CAMlF;IAED,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE/C;IAED,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAI7E;IAED,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAEpD;IAED,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE1C;IAED,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAErC;IAED,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAExC;IAED,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE5C;IAED,2EAA2E;IAC3E,cAAc,IAAI,IAAI,CAOrB;IAED,OAAO,IAAI,IAAI,CAEd;CAOF"}

package/dist/services/session/session-access-state.js

@@ -0,0 +1,92 @@
+import fs from 'node:fs';
+import { getActiveWorkspaceRoot } from '../workspace/active-workspace-root.js';
+import path from 'node:path';
+import { requestsDockerHostControl } from '../../utils/shell/sandbox/docker-host-control.js';
+/** Session-bound read and Docker state; project Docker grants stay in settings. */
+export class SessionAccessState {
+    settings;
+    #readFolders = new Set();
+    #editFiles = new Set();
+    #editFolders = new Set();
+    #dockerOnce = new Set();
+    #dockerRoots = new Set();
+    #dockerDenials = new Set();
+    constructor(settings) {
+        this.settings = settings;
+    }
+    allowReadFolder(folder) {
+        this.#readFolders.add(folder);
+    }
+    allowsRead(targetPath, baseDir = getActiveWorkspaceRoot()) {
+        const target = path.resolve(baseDir, targetPath);
+        return [...this.#readFolders].some((folder) => {
+            const resolvedFolder = path.resolve(baseDir, folder);
+            return target === resolvedFolder || target.startsWith(`${resolvedFolder}${path.sep}`);
+        });
+    }
+    allowEditFile(file, baseDir = getActiveWorkspaceRoot()) {
+        this.#editFiles.add(path.resolve(baseDir, file));
+    }
+    allowEditFolder(folder, baseDir = getActiveWorkspaceRoot()) {
+        this.#editFolders.add(path.resolve(baseDir, folder));
+    }
+    allowsEdit(targetPath, baseDir = getActiveWorkspaceRoot()) {
+        const target = path.resolve(baseDir, targetPath);
+        return (this.#editFiles.has(target) ||
+            [...this.#editFolders].some((folder) => target === folder || target.startsWith(`${folder}${path.sep}`)));
+    }
+    requiresDockerApproval(command) {
+        return requestsDockerHostControl(command) || this.#dockerDenials.has(command);
+    }
+    grantDocker(command, cwd, scope) {
+        if (scope === 'once')
+            this.#dockerOnce.add(command);
+        if (scope === 'session')
+            this.#dockerRoots.add(realRoot(cwd));
+        if (scope === 'project')
+            this.#grantDockerProject(cwd);
+    }
+    hasDockerGrant(command, cwd) {
+        return this.hasDockerProject(cwd) || this.#dockerRoots.has(realRoot(cwd)) || this.#dockerOnce.delete(command);
+    }
+    hasDockerSessionGrant(cwd) {
+        return this.#dockerRoots.has(realRoot(cwd));
+    }
+    hasDockerProject(cwd) {
+        return (this.settings.get('sandbox.dockerHostControlProjects') ?? []).includes(realRoot(cwd));
+    }
+    recordDockerDenial(command) {
+        this.#dockerDenials.add(command);
+    }
+    consumeDockerDenial(command) {
+        return this.#dockerDenials.delete(command);
+    }
+    /** Clears state that must not survive a reset or imported conversation. */
+    clearTransient() {
+        this.#readFolders.clear();
+        this.#editFiles.clear();
+        this.#editFolders.clear();
+        this.#dockerOnce.clear();
+        this.#dockerRoots.clear();
+        this.#dockerDenials.clear();
+    }
+    dispose() {
+        this.clearTransient();
+    }
+    #grantDockerProject(cwd) {
+        const root = realRoot(cwd);
+        const projects = this.settings.get('sandbox.dockerHostControlProjects') ?? [];
+        if (!projects.includes(root))
+            this.settings.set('sandbox.dockerHostControlProjects', [...projects, root]);
+    }
+}
+const realRoot = (cwd) => {
+    const resolved = path.resolve(cwd);
+    try {
+        return fs.realpathSync(resolved);
+    }
+    catch {
+        return resolved;
+    }
+};
+//# sourceMappingURL=session-access-state.js.map